scriptoriumadmin/open-webui
1
0
Fork 0
mirror of https://github.com/open-webui/open-webui.git synced 2026-09-22 00:31:30 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 9
open-webui/backend
History
Sebastien Tardif addc526be0 security: address review feedback on file serving XSS hardening 
- Remove image/svg+xml from safe inline allowlist since SVGs can
  execute JavaScript via script tags and event handlers when served
  as direct document responses
- Strip MIME parameters (e.g. charset) before allowlist comparison
  and normalize to lowercase for consistency
- Remove dead duplicate variable assignments
- Collapse redundant elif/else branches into single else
2026-05-05 02:39:34 -07:00
..
data refac: mv backend files to /open_webui dir 2024-09-04 16:54:48 +02:00
open_webui security: address review feedback on file serving XSS hardening 2026-05-05 02:39:34 -07:00
.dockerignore fix: litellm config issue 2024-02-24 22:35:11 -08:00
.gitignore refac 2024-09-06 04:59:20 +02:00
dev.sh refac 2026-03-24 19:43:30 -05:00
requirements-min.txt refac 2026-04-24 18:20:10 +09:00
requirements.txt refactor(firecrawl): use v2 API directly (#23934) 2026-04-24 18:32:08 +09:00
start.sh refac 2026-03-24 19:43:30 -05:00
start_windows.bat refac 2026-04-24 15:40:02 +09:00